CVE-2003-0265

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.

Score

CVSS 2.0 6.2 Medium

Status

Modified - cve@mitre.org

Published

2003-05-27

Last modified

2024-08-08

Affected products

• Sap Db (Sap)

References

• http://marc.info/?l=bugtraq&m=105232424810097&w=2
• http://www.securityfocus.com/bid/7421